CVE-2023-45199

2023-10-0700:00:00

mitre

github.com

mbed tls

buffer overflow

remote code execution

AI Score

7.6

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:mbed:mbedtls:*:*:*:*:*:*:*:*"
    ],
    "vendor": "mbed",
    "product": "mbedtls",
    "versions": [
      {
        "status": "affected",
        "version": "3.2x",
        "versionType": "custom",
        "lessThanOrEqual": "3.4x"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]